$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.mft File: b4yS38eMv-jF79a6WjehYoIh_-I.mft (raw, json) Hash identifier: Wb1Rs4Fu1L9hEKXmPVnMeboaKI4Pr+mLjPQ5pZGfRX0= Subject key identifier: 8F:A3:23:B4:33:95:76:95:6C:EB:19:A1:E5:00:0B:0A:20:FC:D6:C2 Authority key identifier: 6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2 Certificate issuer: /CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2 Certificate serial: 0C3D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.mft Manifest number: 0C2D Signing time: Sun 24 Nov 2024 07:23:54 +0000 Manifest this update: Sun 24 Nov 2024 07:23:54 +0000 Manifest next update: Tue 26 Nov 2024 07:23:54 +0000 Files and hashes: 1: S6wQg4pa3wX2WWEWbC9PrJTPKkM.roa (hash: uZ6qDu5lJL7vfKz5Jb/jHDLXGWwklVvLim6sg0N4lQc=) 2: Y1Bkn-HibsrLH_7EB2KVJbFxSbo.roa (hash: uKBrIB2maW1Ig3tj5nhjZx6D9drfqdOcf94As7JrL0M=) 3: b4yS38eMv-jF79a6WjehYoIh_-I.crl (hash: Y33wOL12HzJrNpdi8gz5LtxXAqWft/SUOjS1DJLOjoY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2 Validity Not Before: Nov 24 07:23:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8FA323B4339576956CEB19A1E5000B0A20FCD6C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4f:06:e2:af:65:41:b6:32:f1:e8:2c:fd:cb: c2:6e:65:e9:2d:9b:91:80:f5:81:ad:98:59:4a:d5: 5e:3b:20:0b:63:ed:4f:ef:65:54:aa:5f:27:91:cf: 09:a6:b4:54:46:d5:82:42:bd:4a:2a:2a:3b:73:e3: bf:c5:40:23:2c:42:14:da:a7:39:51:b7:11:61:fb: 50:49:6d:ad:5c:f3:3e:16:eb:07:bf:20:08:2c:72: 83:71:d0:a5:c7:3e:21:ce:a6:66:d6:5d:ac:9c:57: 20:46:ef:b2:a1:e3:6d:5c:fe:9c:1e:ed:57:66:ad: d1:f2:b2:68:c1:ec:15:52:49:70:09:ef:43:bc:d2: c1:1e:28:c1:76:9c:7c:06:fa:68:c0:b7:1e:cc:24: 66:dc:e7:d5:34:9e:e2:aa:7f:bb:b5:6a:93:13:44: e0:86:bf:df:a3:ac:0c:55:fd:02:9c:59:af:4e:2a: ba:81:b7:47:93:bc:9e:cd:23:ab:89:15:11:ea:46: 7f:f7:60:b0:a9:2c:61:be:d1:b5:40:27:e3:3b:17: 1d:d6:1f:7d:89:a1:9d:3e:f7:99:f2:b3:0f:cd:f2: c0:0d:a2:33:df:ea:e6:84:aa:79:52:d6:0e:c2:c1: 3c:f7:bb:ed:73:23:08:9f:ae:af:d5:2e:02:fd:23: b1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A3:23:B4:33:95:76:95:6C:EB:19:A1:E5:00:0B:0A:20:FC:D6:C2 X509v3 Authority Key Identifier: keyid:6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0d:5b:30:07:4f:55:7c:72:1a:b1:2d:2f:16:55:af:02:75: 00:2f:e1:44:75:0a:17:90:7d:d5:fb:69:23:c3:f7:43:c2:0b: 28:bf:d2:bb:13:07:df:ee:35:d1:f2:67:37:6a:81:9b:a8:49: 69:12:e0:71:0c:e6:9c:1f:65:3d:2b:c8:36:ed:f1:63:75:2b: cc:04:b3:e5:5b:28:b4:bd:30:d7:ad:ff:89:ac:c0:fa:59:fd: 12:3f:91:d9:c1:ab:76:33:a8:45:f0:11:66:d9:3e:24:85:f2: f7:c4:8e:d5:42:e7:4b:d2:a6:4a:ec:84:f4:cb:9d:7b:68:7d: de:1f:d8:6b:b3:89:a8:39:bc:2a:f1:6c:0d:e4:f0:41:f9:2c: b6:fe:0f:8a:c1:8d:a5:66:33:7a:a9:31:ac:13:09:12:4b:03: 50:b5:bd:45:d8:75:00:dd:bd:ee:50:d1:24:9b:f5:09:f2:49: 0b:f3:87:87:a3:b2:5c:e5:84:6d:98:8b:19:4e:92:d2:46:2d: b9:23:08:54:85:32:82:8d:fd:ea:1c:86:0c:21:d1:be:58:ba: ce:4c:7b:e6:6c:52:8c:50:56:32:7b:b6:83:1b:db:1e:02:08: 92:43:b3:5a:a8:db:7c:5d:fd:af:51:d6:41:9f:81:23:71:df: 80:e7:2c:a0 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkY4 QzkyREZDNzhDQkZFOEM1RUZENkJBNUEzN0ExNjI4MjIxRkZFMjAeFw0yNDExMjQw NzIzNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhGQTMyM0I0MzM5NTc2 OTU2Q0VCMTlBMUU1MDAwQjBBMjBGQ0Q2QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxTwbir2VBtjLx6Cz9y8JuZektm5GA9YGtmFlK1V47IAtj7U/v ZVSqXyeRzwmmtFRG1YJCvUoqKjtz47/FQCMsQhTapzlRtxFh+1BJba1c8z4W6we/ IAgscoNx0KXHPiHOpmbWXaycVyBG77Kh421c/pwe7VdmrdHysmjB7BVSSXAJ70O8 0sEeKMF2nHwG+mjAtx7MJGbc59U0nuKqf7u1apMTROCGv9+jrAxV/QKcWa9OKrqB t0eTvJ7NI6uJFRHqRn/3YLCpLGG+0bVAJ+M7Fx3WH32JoZ0+95nysw/N8sANojPf 6uaEqnlS1g7CwTz3u+1zIwifrq/VLgL9I7EdAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUj6MjtDOVdpVs6xmh5QALCiD81sIwHwYDVR0jBBgwFoAUb4yS38eMv+jF79a6 WjehYoIh/+IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1BFVFcv YjR5UzM4ZU12LWpGNzlhNldqZWhZb0loXy1JLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9iNHlTMzhlTXYtakY3OWE2V2plaFlvSWhfLUkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TUEVUVy9iNHlTMzhlTXYtakY3OWE2V2pl aFlvSWhfLUkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEATw1b MAdPVXxyGrEtLxZVrwJ1AC/hRHUKF5B91ftpI8P3Q8ILKL/SuxMH3+410fJnN2qB m6hJaRLgcQzmnB9lPSvINu3xY3UrzASz5VsotL0w163/iazA+ln9Ej+R2cGrdjOo RfARZtk+JIXy98SO1ULnS9KmSuyE9Mude2h93h/Ya7OJqDm8KvFsDeTwQfkstv4P isGNpWYzeqkxrBMJEksDULW9Rdh1AN297lDRJJv1CfJJC/OHh6OyXOWEbZiLGU6S 0kYtuSMIVIUygo396hyGDCHRvli6zkx75mxSjFBWMnu2gxvbHgIIkkOzWqjbfF39 r1HWQZ+BI3HfgOcsoA== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:14 2024 by rpki-client on console-ams.rpki-client.org